Register or deregister a security key in Care Identity Management

For the Registration Authority

You will need to set up a registration meeting with your user, either via video or face-to-face. Registration must be completed in your presence.

For the user

• the user should have a security key that is supported by NHS CIS2
• the user must bring their computer and security key with them to the meeting
• the user must have a working internet connection
• view the Warrantied Environment Specification to check browser compatibility

To register a security key, first find the user's profile. From the Care Identity Management home page, choose 'Find an existing user'.

Enter the user's details and select 'Search'.

Choose 'View profile' on the right of the screen.

Go to the Authenticators tab on the user's profile page and select Issue other authenticator.

Select Security key and continue

You will now see a screen with instructions how to register the device.

When you've read the instructions and are both ready to proceed, select Generate link.

Copy the link and send it to the user by email, or paste it into the chat function of the video call software you are using.

The user should copy the link.

They will be prompted to choose how they want to create a passkey. They should select the option 'External security key or built-in sensor'.

The user will be prompted to continue their key setup.

The user will be asked to either tap their security key or insert into the USB port.

The user will be asked to create a PIN.

Once the user has created a PIN they will be instructed to touch their security key.

A confirmation message will be displayed advising the PIN has been created and requesting the user to touch their security key again.

To confirm that the registration process is complete, the user will see a Registration successful confirmation page.

The user can now close the page.

The user profile page will now show that the user's device has been registered to the user.

To test and demonstrate that the Security Key registration has been successful, ask the user to authenticate using their security key.

From the user's profile, select the 'Authenticators' tab, find the security key in the list and select 'Remove' on the right.

Select the box to confirm you want to remove the security key, followed by the 'Remove authenticator' button.

Finally you'll see a message confirming that the security key has been removed from the user's profile.